Vulnerability Engineer

Austin, Texas, United States
Corporate Functions


Weekly Hours: 40
Role Number:200184563
This position can be located in Austin (TX), Santa Clara Valley (CA), or Seattle (WA) We are a diverse collection of thinkers and doers, continually re-imagining our products, systems, and practices to help people do what they love in new ways. This is a deeply reciprocal place, where everything we build is the result of people in different roles and teams working together to make each other’s ideas stronger. That same real passion for innovation that goes into our products also applies to our practices, strengthening our dedication to leave the world better than we found it. Apple is seeking an exceptional Information Security Engineer to support our vulnerability response program. This is a technical hands-on role in a dynamic and fast-paced environment. You’ll be working with various application and system owners to report vulnerabilities, to drive remediations, and also to improve our current processes.

Key Qualifications

  • Self-Starter and okay with working remotely and supporting a global team
  • Ability to track and lead numerous parallel activities
  • Passionate about keeping our customers data safe
  • Good written and verbal communication skills
  • Driven to automate and improve continuously
  • Familiarity with common security vulnerabilities and the ability to judge their severity and impact to the business
  • High standard of ethics
  • Excellent knowledge of large-scale security solutions integration
  • Knowledge of the security research community is a strong plus
  • Proven understanding of network topology IPV6
  • Very good understanding of vulnerability scanning tools
  • Skills and Experience with either Python, Perl, Shell Scripting
  • Experience in configuring CI processes
  • Experience with SQL and Linux
  • Experience on Web Services
  • Experience implementing solutions in the cloud
  • Experience with big data
  • Experience in implementing code quality scanning and reporting using tools like Jenkins, Sonar, Appscan or Fortify a plus
  • Requirement for on-call rotation, which includes weekends
  • International travel will be occasionally required


You will join a team that passionately stays up to date on emerging security vulnerabilities and threats, keeps a cool head in crisis, and advocates every single day for improving the security of Apple products and services. You will need to have a good technical background, superb interpersonal skills, and a strong interest in network, system, and web security. The role also requires a proven ability to work with incomplete information and to adapt to changing priorities. Specific responsibilities include: - Strategize vulnerability management for the application and business team - Author clear, authoritative responses to vulnerability queries - Provide guidance to engineering teams regarding the impact of security issues - Work closely with project management to drive issues to closure

Education & Experience

BS in Computer Science, Information Technology or related field preferred

Additional Requirements